webapps

webapps 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

UCCASS 1.8.1 – Blind SQL Injection

:::::::-. ... ::::::. :::.

2012-06-24 dun webapps

SugarCRM CE 6.3.1 – ‘Unserialize()’ PHP Code Execution

2012-06-23 EgiX webapps

WordPress Plugin Flip Book – ‘PHP.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54173/info

2012-06-23 Sammy FORGIT webapps

SilverStripe CMS Pixlr Image Editor – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54172/info

2012-06-23 Sammy FORGIT webapps

Amazon S3 Uploadify Script – ‘Uploadify.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54170/info

2012-06-23 Sammy FORGIT webapps

CMS Lokomedia – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54150/info

2012-06-22 the_cyber_nuxbie webapps

Cotonti – ‘admin.php’ SQL Injection

source: https://www.securityfocus.com/bid/54147/info

2012-06-22 AkaStep webapps

SoftPerfect Bandwidth Manager 2.9.10 – Authentication Bypass

Authentication Bypass and Password disclosure.

2012-06-22 Gitsnik webapps

LimeSurvey 1.92+ build120620 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2012-06-22 dun webapps

agora project 2.13.1 – Multiple Vulnerabilities

###################################################################

2012-06-22 Chris Russell webapps

Commentics 2.0 – Multiple Vulnerabilities

#################################################

2012-06-21 Jean Pascal Pereira webapps

traq 2.3.5 – Multiple Vulnerabilities

====================================================================

2012-06-21 AkaStep webapps

IBM System Storage DS Storage Manager Profiler – Multiple Vulnerabilities

IBM System Storage DS Storage Manager Profiler Multiple Vulnerabilities

2012-06-21 LiquidWorm webapps

Joomla! Component com_szallasok – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/54140/info

2012-06-21 CoBRa_21 webapps

Adiscan LogAnalyzer 3.4.3 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/54117/info

2012-06-21 Sooraj K.S webapps

Coppermine Photo Gallery – ‘index.php’ Script SQL Injection

source: https://www.securityfocus.com/bid/54115/info

2012-06-20 Taurus Omar webapps

Commentics – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54111/info

2012-06-20 Jean Pascal Pereira webapps

web@all – Cross-Site Scripting

source: https://www.securityfocus.com/bid/54109/info

2012-06-20 High-Tech Bridge webapps

WordPress Plugin Schreikasten 0.14.13 – Cross-Site Scripting

# Title: WordPress Schreikasten 0.14.13 XSS

2012-06-20 Henry Hoggard webapps

iBoutique eCommerce 4.0 – Multiple Web Vulnerabilities

Title:

2012-06-19 Vulnerability-Lab webapps

e107 Filedownload Plugin – Arbitrary File Upload / Remote File Disclosure

source: https://www.securityfocus.com/bid/54098/info

2012-06-19 Sammy FORGIT webapps

AdaptCMS 2.0.2 – ‘index.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/54097/info

2012-06-19 indoushka webapps

e107 Image Gallery Plugin – ‘name’ Remote File Disclosure

source: https://www.securityfocus.com/bid/54096/info

2012-06-19 Sammy FORGIT webapps

e107 Hupsi_fancybox Plugin – ‘Uploadify.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54091/info

2012-06-19 Sammy FORGIT webapps

CMS Balitbang – Multiple HTML Injection / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54084/info

2012-06-19 TheCyberNuxbie webapps

VANA CMS – ‘index.php’ Script SQL Injection

source: https://www.securityfocus.com/bid/54066/info

2012-06-18 Black Hat Group webapps

WordPress Plugin Wp-ImageZoom – ‘file’ Remote File Disclosure

source: https://www.securityfocus.com/bid/54058/info

2012-06-18 Sammy FORGIT webapps

WordPress Plugin LB Mixed Slideshow – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54057/info

2012-06-18 Sammy FORGIT webapps

Multiple WordPress Themes – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54052/info

2012-06-18 Sammy FORGIT webapps

MyTickets 1.x < 2.0.8 - Blind SQL Injection

2012-06-18 al-swisre webapps

QNAP Turbo NAS 3.6.1 Build 0302T – Multiple Vulnerabilities

Sense of Security - Security Advisory - SOS-12-006

2012-06-18 Sense of Security webapps

Funeral Script PHP – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/54402/info

2012-06-17 snup webapps

Joomla! Component hwdVideoShare – ‘flash_upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54037/info

2012-06-17 Sammy FORGIT webapps

MediaWiki 1.x – ‘uselang’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53998/info

2012-06-17 anonymous webapps

vBSEO – ‘u’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55908/info

2012-06-16 MegaMan webapps

Webify (Multiple Products) – Multiple HTML Injection / Local File Inclusions

source: https://www.securityfocus.com/bid/54045/info

2012-06-16 snup webapps

Simple Document Management System 1.1.5 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/54043/info

2012-06-16 JosS webapps

Joomla! Component Maian Media – ‘uploadhandler.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54041/info

2012-06-16 Sammy FORGIT webapps

iScripts EasyCreate 2.0 – Multiple Vulnerabilities

Title:

2012-06-16 Vulnerability-Lab webapps

Nuked Klan SP CMS 4.5 – SQL Injection

Title:

2012-06-16 Vulnerability-Lab webapps

WordPress Plugin Automatic 2.0.3 – SQL Injection

Title:

2012-06-16 nick58 webapps

Huawei HG866 – Authentication Bypass

# Exploit Title: Huawei HG866 Authentication Bypass

2012-06-16 hkm webapps

News Script PHP 1.2 – Multiple Vulnerabilities

Title:

2012-06-16 Vulnerability-Lab webapps

PHP Decoda 3.3.1 – Local File Inclusion

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2012-06-16 Number 7 webapps

webo site speedup 1.6.1 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

2012-06-16 dun webapps

Useresponse 1.0.2 – Privilege Escalation / Remote Code Execution

#!/usr/bin/python

2012-06-15 mr_me webapps

Joomla! Component JCal Pro Calendar – SQL Injection

source: https://www.securityfocus.com/bid/54042/info

2012-06-15 Taurus Omar webapps

WordPress Plugin ORGanizer – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/54039/info

2012-06-15 MustLive webapps

ADICO – ‘index.php’ Script SQL Injection

source: https://www.securityfocus.com/bid/54023/info

2012-06-15 Ibrahim El-Sayed webapps

Squiz CMS – Multiple Cross-Site Scripting / XML External Entity Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54049/info

2012-06-14 Nadeem Salim webapps